Skip to contentRed Hat Jboss Enterprise Application Platform vulnerabilities
- netty, red hat cryostat 4, cryostat 4 on rhel 9 +37 more +39 moreNetty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame BypassCVE-2026-33871Public exploitFix available8.7 High
- netty, red hat cryostat 4 on rhel 9, logging subsystem for red hat openshift +33 more +35 moreNetty: HTTP Request Smuggling via Chunked Extension Quoted-String ParsingCVE-2026-33870Fix available7.5 High
- redhat undertow, red hat build of quarkus, data grid 8 +25 more +27 moreUndertow: outofmemoryerror due to @multipartconfig handlingCVE-2023-3223Fix available7.5 High
- codehaus-plexus plexus-utils, red hat a-mq clients 2, a-mq online +28 more +30 moreCodehaus-plexus: xml external entity (xxe) injectionCVE-2022-4245Fix available4.3 Medium
- codehaus-plexus plexus-utils, red hat a-mq clients 2, a-mq online +28 more +30 moreCodehaus-plexus: directory traversalCVE-2022-4244Public exploitFix available7.5 High
- redhat undertow, netapp oncommand workflow automation, red hat eap 7.4.10 release +31 more +33 moreUndertow: infinite loop in sslconduit during closeCVE-2023-1108Fix available7.5 High
- redhat drools, red hat build of apache camel for spring boot, build of quarkus +16 more +18 moreDrools: unsafe data deserialization in streamutilsCVE-2022-1415Fix available8.1 High
- isaacs node-tar, tar, red hat confidential compute attestation +40 more +42 morenode-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path SanitizationCVE-2026-23745Public exploitFix available8.2 High
- red hat jboss brms, jboss enterprise application platform, jboss enterprise web server +3 more +5 moreEJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat...CVE-2012-56267.5 High
- google angularjs, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreAngularJS XSS via SCE resource URL sanitization bypassCVE-2026-11998Fix available7.6 High
- red hat jboss enterprise application platformIt was found that the improper default permissions on /tmp/auth directory in JBoss Enterprise...CVE-2016-70667.8 High
- red hat jboss enterprise application platform, red hat, inc. hat jboss enterprise application platform, redhat enterprise linux +2 moreIt was discovered that the jboss init script as used in Red Hat JBoss Enterprise Application...CVE-2017-121897.8 High
- redhat jboss enterprise application platform, red hat jboss enterprise application platform 5 for rhel 6, jboss enterprise application platform 7 +2 more +4 moreJboss-eap: aws-ec2: jboss eap and aws ec2: information disclosure via incorrect directory permissionsCVE-2012-3427Fix available5.5 Medium
- redhat jboss enterprise application platform, red hat jboss enterprise application platform 6 for rhel 5, jboss enterprise application platform 6 for rhel 6 +4 more +6 moreJboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypassCVE-2012-45505.3 Medium
- redhat jboss enterprise application platform, red hat jboss enterprise application platform 6 for rhel 5, jboss enterprise application platform 6 for rhel 6 +4 more +6 moreJboss enterprise application platform: org.jboss.as.ejb3: jboss enterprise application platform: access restriction bypass via improper ejb method authorizationCVE-2012-45496.5 Medium